Use SConfig to choose how a BinaryLane Windows Server instance checks for and installs Microsoft updates.

This guide is for a single Windows Server instance. If you manage several Windows servers, use your normal management tooling, such as Group Policy, WSUS, Windows Admin Center, or another patch management tool.

TABLE OF CONTENTS

Applies to

  • BinaryLane Windows Server 2019
  • BinaryLane Windows Server 2022
  • BinaryLane Windows Server 2025

Before you begin

You need:

  • a BinaryLane Windows Server 2019, 2022, or 2025 instance
  • an Administrator account on the server
  • access through Remote Desktop, or console access if Remote Desktop is unavailable
  • a maintenance window if you plan to install updates

Installing Windows updates can require a restart. Plan the change for a time when a restart will not surprise your users or customers.

Open SConfig

  1. Sign in to the Windows Server instance as an Administrator.
  2. Open PowerShell as Administrator.
  3. Run:
sconfig

BinaryLane Windows Server images use Windows Server Standard with Desktop Experience, so SConfig does not open automatically when you sign in.

Windows Server 2025 SConfig main menu showing option 5, Update setting

Change the update setting

  1. In the SConfig main menu, enter 5 (Update setting) and press Enter.
  1. Enter the number or letter for the update behaviour you want, then press Enter:
SettingWhat it doesMenu choice
AutomaticChecks for updates and installs them automatically.A or 1
Download onlyChecks for updates and downloads them, but does not install them automatically.D or 2
ManualDoes not check for updates automatically.M or 3

The screenshots show Windows Server 2025. Follow the choices displayed on your server: older versions may use A, D and M instead of 1, 2 and 3.

  1. Press Enter to return to the main SConfig menu after the setting is saved.
  2. To exit SConfig, enter 15 (Exit to command line).

SConfig update choices: Automatic, Download only and Manual

For many customer-managed servers, Download only is a practical default. It lets Windows download available updates while leaving you in control of when they are installed and when the server restarts. Check for and install updates regularly; downloaded updates do not protect the server until they are installed.

Windows can notify you through Action Center when downloaded updates are ready to install, but only while you are signed in.

Install updates when you are ready

To install updates yourself, use the Install updates menu. Schedule installation for a maintenance window and allow time for a restart.

When you are ready to scan for and install updates:

  1. Open SConfig.
  2. Enter 6 (Install updates) and press Enter.
  1. Choose the update category you want to scan for.
  2. Review the updates offered before installing them.
  3. Restart the server if Windows requires it.

Use quality updates for regular Windows updates. Plan upgrades to a newer Windows Server version separately.

Confirm the setting

Reopen SConfig and check the Microsoft Update setting shown on the main menu.

You can also view installed updates from PowerShell:

Get-Hotfix | Sort-Object InstalledOn

This confirms installed hotfixes. It does not prove that every available update has been installed.

Troubleshooting

ProblemWhat to check
sconfig is not recognisedOpen PowerShell as Administrator and try SConfig. Older Windows Server versions may use SConfig.cmd.
SConfig closes or returns to PowerShellRun sconfig again from the same session.
You cannot use SConfig in a remote PowerShell sessionUse Remote Desktop or console access instead. Microsoft does not support using SConfig from a remote PowerShell session.
The menu shows letters instead of numbersFollow the label, not only the number. Choose Download only, shown as D on some SConfig screens and 2 on others.
Updates installed but the server is still pending a restartSchedule a restart during your maintenance window. Some security updates are not fully applied until Windows restarts.